[cssm] [Css-csts] [EXTERNAL] Re: Issue regarding initiator-identifier and responder-identifier

Tue Dec 10 18:06:05 UTC 2019

Hi John,

Ok.  Got it.  So these ffinitiatorid's are really a sort of low-level id of the entity that initially is establishing, or responding to, a BIND request.  Right?  If I recall correctly, there must still be an IP address and a Port associated with the BIND.  Isn't there also an (optional) password for the BIND to provide a sort of normal "login userid / password" authentication pair, or am I way off base here?

I'm not sure if I have unwound this correctly, but in any event I get that if there is a registry of these ffinitiatorid's that this would be an asset protected by the service supplier and that any registry of passwords would (should) itself be encrypted when at rest or in use.  Right?

Thanks, Peter

From: SMWG <smwg-bounces at mailman.ccsds.org> on behalf of John Pietras <john.pietras at gst.com>
Date: Tuesday, December 10, 2019 at 9:10 AM
To: SMWG <smwg at mailman.ccsds.org>
Cc: Wolfgang Hell <wo_._he at t-online.de>
Subject: Re: [cssm] [Css-csts] [EXTERNAL] Re: Issue regarding initiator-identifier and responder-identifier

This is a re-send of the message below, which was stopped by the SMWG mail list on the first attempt due to technical issues. My apologies if you are seeing this message a second time.

Best regards,
John
________________________________
From: John Pietras <jpietras at gst.com>
Sent: Tuesday, December 10, 2019 9:29 AM
To: Shames, Peter M (US 312B) via SMWG <smwg at mailman.ccsds.org>; Barkley, Erik J (US 3970) <erik.j.barkley at jpl.nasa.gov>; Holger.Dreihahn at esa.int <Holger.Dreihahn at esa.int>
Cc: CSS-CSTS <css-csts-bounces at mailman.ccsds.org>; CCSDS_CSTSWG (css-csts at mailman.ccsds.org) <css-csts at mailman.ccsds.org>
Subject: Re: [Css-csts] [EXTERNAL] Re: Issue regarding initiator-identifier and responder-identifier

Peter,
The initiatorId and responderId parameters (and their OIDs) are (will be) registered as part of every SLE and CSTS functional resource in the SANA Functional Resource Registry. e.g., the name of the initiatorId parameter is ffInitiatorId, with the OID:
       {   iso(1)   identified organizations(3)   standard producing organization(112)   ccsds(4)   css(4)
           crossSupportResources(2)  crossSupportFunctinalities(2)   FwdFrameCstsProvider(1000)
           parameter-type(1)    ffInitiatorId(4)    version1(1)  }
[where the "1000" value for FwdFrameCstsProvider is a temporary placeholder until the actual value is assigned when it's uploaded to SANA].

Regarding the *values* of the initiatorId and responderId parameters, that has been a topic of discussion. According to Wolfgang, these have been traditionally bilaterally negotiated between Provider CSSS and User Mission, and known only to a few members of those two parties, essentially the same as passwords. The discussion that we were having in CSTSWG was whether these value should ever appear  information entities such as the Service Agreement and Configuration Profiles, or whether they should continue to be negotiated and recorded by some other "more secure/more limited access" method. This latter line of thinking presupposes that Service Agreements and Configuration Profiles will essentially be readily available to many people in the affected oganizations, of which only a relatively few should have access to the actual values of the  initiatorId and responderId parameters. The intended caveat in the definitions of these parameters ("A comment will be added in the semantic definition") will essentially defer to the authors of those documents whether they should be included or not, based on the security policies of the specific Provider CSSS and User Mission. The CSSMWG should consider how to ensure that the different cases (e.g., included vs excluded) are supported by the affected Service Management information entities.

By the way - I did not receive Erik's original message nor Holger's reply, both sent on Thursday. I know about this thread only because I just now read Erik's and Peter's follow-up emails that they sent yesterday. That's likely due to an IT "situation" that hit GST last week. I need to check with our IT dept. to ensure that I'm not losing any more email. But if anyone sent me an email between Thursday afternoon and Monday it might be a good idea to send it again.

Thanks and sorry for the inconvenience.

John

________________________________
From: SMWG <smwg-bounces at mailman.ccsds.org> on behalf of Shames, Peter M (US 312B) via SMWG <smwg at mailman.ccsds.org>
Sent: Monday, December 9, 2019 1:36 PM
To: Barkley, Erik J (US 3970) <erik.j.barkley at jpl.nasa.gov>; Holger.Dreihahn at esa.int <Holger.Dreihahn at esa.int>
Cc: CSS-CSTS <css-csts-bounces at mailman.ccsds.org>; CCSDS Service Mgmt WG <smwg at mailman.ccsds.org>; CCSDS_CSTSWG (css-csts at mailman.ccsds.org) <css-csts at mailman.ccsds.org>
Subject: Re: [cssm] [Css-csts] [EXTERNAL] Re: Issue regarding initiator-identifier and responder-identifier

I am curious if these initiator-ID and responder-ID use the OIDs defined in the SANA Org registry or something else? If "something else" is the answer, how are these related to the registered orgs, or is that also a separate FR specific registry?

Thanks, Peter

From: CSS-CSTS <css-csts-bounces at mailman.ccsds.org> on behalf of CSTS-WG <css-csts at mailman.ccsds.org>
Reply-To: Erik Barkley <erik.j.barkley at jpl.nasa.gov>
Date: Monday, December 9, 2019 at 10:18 AM
To: "Holger.Dreihahn at esa.int" <Holger.Dreihahn at esa.int>
Cc: CSS-CSTS <css-csts-bounces at mailman.ccsds.org>, SMWG <smwg at mailman.ccsds.org>, CSTS-WG <css-csts at mailman.ccsds.org>
Subject: Re: [Css-csts] [EXTERNAL] Re: Issue regarding initiator-identifier and responder-identifier

Hello Holger,

Thank you for the quick update. What you have noted sounds very good and I think we are indeed in agreement.

Best regards,

-Erik

From: Holger.Dreihahn at esa.int <Holger.Dreihahn at esa.int>
Sent: Thursday, December 5, 2019 23:07
To: Barkley, Erik J (US 3970) <erik.j.barkley at jpl.nasa.gov>
Cc: CCSDS_CSTSWG (css-csts at mailman.ccsds.org) <css-csts at mailman.ccsds.org>; CSS-CSTS <css-csts-bounces at mailman.ccsds.org>; EXTERNAL-Pietras, John V (US 332C-Affiliate) <john.pietras at gst.com>; CCSDS Service Mgmt WG <smwg at mailman.ccsds.org>; Wolfgang Hell <wo_._he at t-online.de>
Subject: [EXTERNAL] Re: [Css-csts] Issue regarding initiator-identifier and responder-identifier

Hi Erik,
For the business of the initiator identifier and responder identifier we noted yesterday the following:

The WG agrees that initiator ID, responder ID and responder port ID are in the FR model. Wolfgang will add them for SLE. A comment will be added in the semantic definition. John will use that approach as well.

The decision if these parameters (like all parameters) are used for a particular MD SI configuration within a service agreement / configuration profiles is left to Service Management.

So the FRM will be complete and CSSM will take care when they are used. I think this should address your point and to me it feels right to go that way.

Best regards,
Holger

Holger Dreihahn
European Spacecraft Operations Centre | European Space Agency | S-431
+49 6151 90 2233 | http://www.esa.int/esoc

From:        "Barkley, Erik J\(US 3970\) via CSS-CSTS" <css-csts at mailman.ccsds.org<mailto:css-csts at mailman.ccsds.org>>
To:        "EXTERNAL-Pietras, John V (US 332C-Affiliate)" <john.pietras at gst.com<mailto:john.pietras at gst.com>>, "CCSDS_CSTSWG (css-csts at mailman.ccsds.org<mailto:css-csts at mailman.ccsds.org>)" <css-csts at mailman.ccsds.org<mailto:css-csts at mailman.ccsds.org>>, "Wolfgang Hell" <wo_._he at t-online.de<mailto:wo_._he at t-online.de>>
Cc:        "CCSDS Service Mgmt WG" <smwg at mailman.ccsds.org<mailto:smwg at mailman.ccsds.org>>
Date:        05/12/2019 23:09
Subject:        Re: [Css-csts] Issue regarding initiator-identifier and responder-identifier
Sent by:        "CSS-CSTS" <css-csts-bounces at mailman.ccsds.org<mailto:css-csts-bounces at mailman.ccsds.org>>

________________________________

John et al,

I think this is one of the issues that needs to be coordinated at the area level.  As you have noted via your reference to the technote, the CSSM WG intends to essentially base the detailed content of the configuration profile on the parameters stated in the FRM. It seems to me that it will be a substantially non-trivial enough job to pull off without having to resort to yet another mechanism other than FRs for stating the various initiator and responder identifiers.  I can appreciate the sensitive info/security concerns, but I think having the complete model is also important.  From the CSSM perspective, it may in fact be more secure if this information is carried in the service package – SPDF book -- (via modified result data set) such that you could in effect have “rolling” identifiers specific for instances that change tracking-pass to tracking-pass (assuming that the SP is itself encrypted signed and/or block-chained, etc).  I think this might need a broader discussion and so I am also copying the CSSM WG for cognizance.  Unfortunately I was not able to attend the CSTS WG telecon scheduled for earlier today so perhaps this is overcome by events but I just wanted to see if we might come to a broader consensus -- I tend to agree with your approach 3.

Best regards,
-Erik

From: CSS-CSTS <css-csts-bounces at mailman.ccsds.org<mailto:css-csts-bounces at mailman.ccsds.org>> On Behalf Of John Pietras
Sent: Tuesday, December 3, 2019 08:10
To: CCSDS_CSTSWG (css-csts at mailman.ccsds.org<mailto:css-csts at mailman.ccsds.org>) <css-csts at mailman.ccsds.org<mailto:css-csts at mailman.ccsds.org>>; Wolfgang Hell <wo_._he at t-online.de<mailto:wo_._he at t-online.de>>
Subject: [EXTERNAL] [Css-csts] Issue regarding initiator-identifier and responder-identifier

CSTSWG colleagues ---
Recently (perhaps in Darmstadt?) Wolfgang and I discussed whether the initiator-identifier and responder-identifier parameters of the Association Control procedure should be in the list of configuration parameters for a(n) SLE/CS Transfer Service Provider FR. I had envisioned including them but Wolfgang has excluded them from his SLE TS Provider FRs (FCLTU, RAF, etc.). When we discussed it he stated his belief that they should not be in the FR definition because that is sensitive information that should not be accessible by, for instance, MD-CSTS. Rather, Wolfgang argued, this information should be exchanged by some “other” (not specified by CCSDS) means. Conceptually, this other mechanism would contain these identifiers in a table that has as a key into it the service-instance-identifier, which *is* in the FR definition. In particular Wolfgang said that he did not think that these parameters should be included in the configuration profiles that would be used for scheduling Service Packages. Wolfgang’s argument made sense to me and I agreed with his logic, and planned to remove those parameters from the CSTS Provider FRs for which I am responsible – Forward Frame, Monitored Data, and Tracking Data.

HOWEVER, I now realize that the FF, MD, and TD books *all* identify these two parameters as “service management” parameters and assign them their service-specific classifiers. The assignment of the classifiers implies that these are to be registered as configuration parameters of the respective FRs, and there is *no* indication in any of the documentation that they are to be treated in a special manner – i.e., be excluded from the definition of the FRs that are registered in SANA.

Off the top of my head, I can think of several ways that we might remedy this problem:

1.       Somehow redefine them as some sort of “special” configuration parameters (nor “normal” service management parameters) in the FF, TD, and MD service specifications. E.g., no classifiers would be specified. This would involve tweaking the FF book (relatively easy), TD book (a bit harder since it’s already been submitted to the Secretariat) and the MD book (involves a TC since it has already been published).

2.       Leave them as configuration parameters of the FRs and add them to the SANA Registry FR definitions, but include caveats on their definitions that recommend that they not be included in configuration profile and GET-able only under highly secure circumstances. This approach (a) has no impact on the CSTS books and (b) allows whatever mechanisms that *are* used to leverage the existing information architecture – e.g., a privileged, secure instance of MD-CSTS could be implemented that would be permitted to read these values (e.g., to confirm their real-time setting if the service user is having problems binding).

3.       Similar to option 2, leave them as configuration parameters of the FRs and add them to the SANA Registry FR definitions, but let the SMWG decide on and enforce the restrictions in the Configuration Profile specification, and let the Agencies/Providers decide who can read these parameters.

My preference would be for something along the lines of options 2 or 3.

In a somewhat related topic, there is also the responder-port-id parameter that is specified in the existing CSTS specifications as a service management parameter. Whatever we decide to do about the initiator-identifier and responder-identifier parameters, we need to include the responder-port-id parameter as a parameter of FR because it *does* need to be in the configuration profiles in order to support the dynamic allocation method of TCP Socket scheduling that the SMWG wants to support (see section 3.4.2 of https://cwe.ccsds.org/css/docs/CSS-SM/CWE%20Private/Tech%20Note%20Development/Config%20Profile%20Svc%20Agreement%20Tech%20Note/Simplified%20ConfigProfilesAndSvcAgreements_TechNote-v1x4-clean.docx?Web=1)

I don’t know if we’ll have time to discuss this on Thursday but we do need to resolve these issues.

Best regards,
John
 _______________________________________________
CSS-CSTS mailing list
CSS-CSTS at mailman.ccsds.org<mailto:CSS-CSTS at mailman.ccsds.org>
https://mailman.ccsds.org/cgi-bin/mailman/listinfo/css-csts

This message is intended only for the recipient(s) named above. It may contain proprietary information and/or

protected content. Any unauthorised disclosure, use, retention or dissemination is prohibited. If you have received

this e-mail in error, please notify the sender immediately. ESA applies appropriate organisational measures to protect

personal data, in case of data privacy queries, please contact the ESA Data Protection Officer (dpo at esa.int<mailto:dpo at esa.int>).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.ccsds.org/pipermail/smwg/attachments/20191210/d6253b19/attachment-0001.html>